Description
Double free vulnerability in the WebSocket Server (res_http_websocket module) in Asterisk Open Source 11.x before 11.14.2, 12.x before 12.7.2, and 13.x before 13.0.2 and Certified Asterisk 11.6 before 11.6-cert9 allows remote attackers to cause a denial of service (crash) by sending a zero length frame after a non-zero length frame.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | asterisk | 1:13.1.0~dfsg-1 | — |
References
- http://advisories.mageia.org/MGASA-2015-0010.html
- http://downloads.asterisk.org/pub/security/AST-2014-019.html
- MDVSA-2015:018 vendor-advisory
- 20141210 AST-2014-019: Remote Crash Vulnerability in WebSocket Server mailing-list
- http://packetstormsecurity.com/files/129473/Asterisk-Project-Security-Advisory-AST-2014-019.html
- 71607 vdb-entry
- 20141210 AST-2014-019: Remote Crash Vulnerability in WebSocket Server mailing-list
- 60251 third-party-advisory
- 1031345 vdb-entry